Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2025_2473)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20252473 advisory. kernel: HID: core: zero-initialize the report buffer CVE-2024-50302 kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox device...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1757962453)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1757962453 advisory. - In the Linux kernel, the following vulnerability has been resolved: can: peakusb: fix use after free bugs After calling...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1755682686)

"The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1755682686 advisory. - In the Linux kernel, the following vulnerability has been resolved: NFSv4: Don't hold the layoutget locks across multiple RPC cal...

Rocky Linux 9 [CIQ] Security Update: systemd / systemd-container / systemd-container-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_0954)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20230954 advisory. systemd: local information leak due to systemd-coredump not respecting fs.suiddumpable kernel setting CVE-2022-4415 systemd: deadlock in systemd-coredump v...

Rocky Linux 9 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-64k / kernel-64k-core / etc Multiple Vulnerabilities (crlsa-2024_4583)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20244583 advisory. kernel: TIPC message reassembly use-after-free remote code execution vulnerability CVE-2024-36886 kernel: ethernet: hisilicon: hns: hnsdsafmisc: fix a...

CLEANSTART-2026-DN43014 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

Security vulnerability affects the alertmanager package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection...

CVE-2026-97956

A flaw was found in the Linux kernel's network failover driver, which can result in a Denial of Service DoS. When a network slave device undergoes a name change, the driver invokes an open operation that attempts to reacquire locks already held by upper-level callers. A local user capable of...

CVE-2026-97951

A flaw was found in the Linux kernel's iSCSI Internet Small Computer Systems Interface target subsystem. A remote client can trigger a Denial of Service DoS by sending remaining data packets for a write request that was aborted by a device reset command. Because the subsystem fails to signal...

CLEANSTART-2026-ZN87081 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

CVE-2026-56855 affects multiple packages. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1780052998)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780052998 advisory. - In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix potential CAN frame reception race in isotprcv...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1757961864)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1757961864 advisory. - In the Linux kernel, the following vulnerability has been resolved: can: peakusb: fix use after free bugs After calling...

SUSE SLED15 / SLES15 Security Update : cosign (SUSE-SU-2026:4392-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4392-1 advisory. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272117. -...

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1780052998)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780052998 advisory. - In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix potential CAN frame reception race in isotpr...

SUSE CVE-2026-97951

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix hang for aborted WRITEPENDING commands When a LUNRESET aborts a WRITE command that is in the TRANSPORTWRITEPENDING state, the target core sets CMDTABORTED and waits for the frontend to finish processing. ...

CVE-2026-97948

A flaw was found in the Linux kernel's PowerPC Enhanced Error Handling EEH subsystem. A recursive locking issue occurs during device reset handling when an error recovery process attempts to acquire a lock it already holds. When an error is detected on an affected device, this condition causes th...

CVE-2026-97483

A flaw was found in the Linux kernel. During error recovery or reset operations for USB storage devices connected to a root hub, the USB subsystem fails to respect memory allocation constraints during control transfers. A local user triggering device error recovery under memory pressure can cause...

CVE-2026-97619

A flaw was found in the Linux kernel's iouring subsystem. Improperly deferring write completion accounting to background task work can create a circular locking dependency when a filesystem freeze operation is performed. A local user could exploit this flaw by issuing asynchronous write operation...

SUSE-SU-2026:4392-1 Security update for cosign

This update for cosign fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272117. - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library...

CLEANSTART-2026-JI49004 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

CVE-2026-56855 affects multiple packages. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

Important: libheif

Issue Overview: Incomplete fix for GHSA-73p7-m7gg-w2jv leaves libheif 1.23.1 vulnerable to an out-of-bounds read NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-hh47-fhqr-cj2r CVE-2026-84450 Incomplete fix for GHSA-73p7-m7gg-w2jv leaves libheif 1.23.1 vulnerable to an...